<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-openembedded.git/meta-oe/recipes-devtools/yasm, branch mickledore-next</title>
<subtitle>Mirror of git.openembedded.org/meta-openembedded</subtitle>
<id>https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=mickledore-next</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=mickledore-next'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/'/>
<updated>2023-09-03T14:43:56+00:00</updated>
<entry>
<title>yasm: fix CVE-2023-37732</title>
<updated>2023-09-03T14:43:56+00:00</updated>
<author>
<name>Soumya</name>
<email>soumya.sambu@windriver.com</email>
</author>
<published>2023-08-18T14:38:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=41fffef6b044b2722aa13f7e7648a3f848231851'/>
<id>urn:sha1:41fffef6b044b2722aa13f7e7648a3f848231851</id>
<content type='text'>
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c
and /elf/elf.c, which allows the attacker to cause a denial of service via a
crafted file.

References:
https://github.com/yasm/yasm/issues/233
https://nvd.nist.gov/vuln/detail/CVE-2023-37732

Signed-off-by: Soumya &lt;soumya.sambu@windriver.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>yasm: fix CVE-2023-31975</title>
<updated>2023-07-25T11:15:34+00:00</updated>
<author>
<name>Polampalli, Archana</name>
<email>archana.polampalli@windriver.com</email>
</author>
<published>2023-07-20T11:35:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=03fd1d368ac19793b3e4c35159ba2ce802247e4d'/>
<id>urn:sha1:03fd1d368ac19793b3e4c35159ba2ce802247e4d</id>
<content type='text'>
yasm v1.3.0 was discovered to contain a memory leak via the function
yasm_intnum_copy at /libyasm/intnum.c.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-31975
https://github.com/yasm/yasm/issues/210

Upstream patches:
https://github.com/yasm/yasm/commit/b2cc5a1693b17ac415df76d0795b15994c106441

Signed-off-by: Archana Polampalli &lt;archana.polampalli@windriver.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>yasm: Only depend on xmlto when docs are enabled</title>
<updated>2022-08-24T23:59:55+00:00</updated>
<author>
<name>Mike Crowe</name>
<email>mac@mcrowe.com</email>
</author>
<published>2022-08-24T15:35:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=14c47261c2a90d6aa96bf3ff83028eb9404c10ce'/>
<id>urn:sha1:14c47261c2a90d6aa96bf3ff83028eb9404c10ce</id>
<content type='text'>
The yasm build system only requires xmlto when building its
documentation. It automatically detects whether it is present at
configure time.

Signed-off-by: Mike Crowe &lt;mac@mcrowe.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>yasm: fix buildpaths warning</title>
<updated>2022-08-06T16:51:32+00:00</updated>
<author>
<name>Anuj Mittal</name>
<email>anuj.mittal@intel.com</email>
</author>
<published>2022-08-04T06:13:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=a7346d2bb1a60289225cce78d760e4d264d1b2a2'/>
<id>urn:sha1:a7346d2bb1a60289225cce78d760e4d264d1b2a2</id>
<content type='text'>
ax_create_stdint_h.m4 includes $CC as a comment in the generated header
which leads to buildpaths warning:

| WARNING: yasm-1.3.0+gitAUTOINC+ba463d3c26-r0 do_package_qa: QA Issue: File /usr/include/libyasm-stdint.h in package yasm-dev contains reference to TMPDIR [buildpaths]

Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>recipes: Update SRC_URI branch and protocols</title>
<updated>2021-11-03T13:57:49+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2021-11-02T23:06:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=b402a3076fbafe05d0b8621e50603b65c3fe8147'/>
<id>urn:sha1:b402a3076fbafe05d0b8621e50603b65c3fe8147</id>
<content type='text'>
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>yasm: Fix build with autotools 2.70+</title>
<updated>2021-02-04T16:53:47+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2021-02-03T22:28:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=efa63d8ffb2b70fe5e9f6c3c080e651a04a6ee8b'/>
<id>urn:sha1:efa63d8ffb2b70fe5e9f6c3c080e651a04a6ee8b</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>meta-oe: Remove using python2</title>
<updated>2020-01-22T17:56:34+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2020-01-20T00:33:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=505774658338002a92c2e32c4c57c55f36c5e36e'/>
<id>urn:sha1:505774658338002a92c2e32c4c57c55f36c5e36e</id>
<content type='text'>
This change makes the parsing go though, we still might have build
issues, which will be reported in world builds seprately

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>yasm: Clarify BSD license variant</title>
<updated>2019-10-25T17:29:51+00:00</updated>
<author>
<name>Christophe PRIOUZEAU</name>
<email>christophe.priouzeau@st.com</email>
</author>
<published>2019-10-23T15:15:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=e023880905b4696dec46e942d0f9fa95f291e88e'/>
<id>urn:sha1:e023880905b4696dec46e942d0f9fa95f291e88e</id>
<content type='text'>
The License of yasm is MIT.

Signed-off-by: Christophe Priouzeau &lt;christophe.priouzeau@st.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>yasm: Use 1.3.0 release</title>
<updated>2018-10-03T00:17:10+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2018-10-02T16:23:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=58fc24db7124fa76680c356bd1c959572e13e70e'/>
<id>urn:sha1:58fc24db7124fa76680c356bd1c959572e13e70e</id>
<content type='text'>
* latest master might have issues, so revert to using 1.3.0 release
* Disable parallel compile

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>yasm: Add recipe ( previously in oe-core )</title>
<updated>2018-09-30T17:17:48+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2018-09-30T17:12:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=7e196d2c3a99ad2ad88c789e0e5eb3e4b91dadc4'/>
<id>urn:sha1:7e196d2c3a99ad2ad88c789e0e5eb3e4b91dadc4</id>
<content type='text'>
Remove in OE-Core via

http://git.openembedded.org/openembedded-core/commit/?id=b7f3f7ecfdf26129c5df2d3ee14e73c4633ea5a3

while apps in OE-core have move to use nasm or other things yasm is
still needed by some apps in rest of OE universe e.g. firefox

switch to github URI since master has bunch of fixes over 1.3.0 release

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
</feed>
